Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: +UpRDYXml01KpVBzANRyxjX/cIomCn1WUz7M5ZLo0SA=
Subject key identifier: 95:BF:5F:C4:8B:B9:6B:37:60:0F:21:0D:3C:9D:57:67:15:59:26:B6
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 0197BAEB8370320FA3F047F8132BEDF27B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 0E40
Signing time: Sun 29 Jun 2025 09:01:26 +0000
Manifest this update: Sun 29 Jun 2025 09:01:26 +0000
Manifest next update: Mon 30 Jun 2025 09:01:26 +0000
Files and hashes: 1: Ki24jPZgJrCPTdr-EzJOC_g3W_g.roa (hash: n4ZbZmzZFlutTnq+BcgW8yw5bghHlIwLiglxRYnEDAw=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: erqCySRkrglB2BlrBCQEZyz1soj8P3BNFHkv5MLt67o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:83:70:32:0f:a3:f0:47:f8:13:2b:ed:f2:7b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Jun 29 09:01:26 2025 GMT
Not After : Jun 30 09:01:26 2025 GMT
Subject: CN=95bf5fc48bb96b37600f210d3c9d5767155926b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:f5:53:51:77:e8:ae:ac:0d:a2:f4:ac:8b:
25:81:e7:88:3e:57:df:c0:bd:81:51:67:62:50:24:
29:cb:b8:8e:1a:e4:08:d2:19:e7:a5:fd:2a:6a:32:
e9:5c:5e:c8:41:3b:6f:73:ff:f6:90:e6:39:48:70:
18:e9:a7:c4:39:e6:5a:f1:80:63:39:bd:4c:f1:e6:
5e:dd:3f:c1:0d:e6:32:e7:e1:7f:1d:63:12:41:92:
a2:94:dd:82:0e:6f:75:3e:8e:b4:78:39:9e:34:1f:
8a:a4:46:16:2c:19:94:56:f0:81:40:ea:ba:d9:3e:
5d:83:32:95:a3:71:20:7d:d1:f8:31:f2:a9:cd:1c:
dd:f3:bb:f1:68:02:c1:de:db:dd:57:81:64:9b:62:
8c:66:3f:44:16:5e:5a:c7:ec:cd:84:96:0a:2b:bf:
58:60:db:e5:62:d3:f2:9d:96:f1:57:ac:60:37:63:
01:54:1b:1e:e5:80:da:ba:2a:05:d6:54:d7:1e:b4:
9a:93:94:53:83:eb:15:ba:2f:b7:fb:c8:a1:6f:45:
96:d6:32:7e:25:23:0d:32:c2:fb:aa:34:ef:21:35:
4f:91:f4:14:30:4e:48:dd:20:77:0b:df:c2:8b:7e:
1b:36:48:29:ac:99:8d:7f:0b:7a:c5:72:b2:fe:74:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BF:5F:C4:8B:B9:6B:37:60:0F:21:0D:3C:9D:57:67:15:59:26:B6
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:99:10:35:f8:59:72:54:7c:85:eb:ed:e9:26:b2:82:32:e1:
02:dc:7f:50:a3:51:e4:0a:6a:4f:c4:67:f2:da:33:98:cb:f4:
eb:05:6b:44:8c:a2:dc:e8:92:ea:20:94:15:09:9c:fb:a4:ef:
07:c2:8b:a0:df:23:56:ea:e7:01:51:21:aa:1f:4d:53:53:58:
ba:8d:5f:c2:99:7b:61:b4:f4:54:d6:5e:9c:99:07:6d:0e:fd:
c0:dc:21:24:38:df:0a:4e:0a:3a:36:91:bf:1a:6b:98:bf:c0:
f5:8d:83:e3:18:89:68:74:c0:f7:a5:73:23:5a:4e:fb:ba:2b:
c6:ff:eb:4b:f0:9d:8c:27:1d:f0:fc:ba:e7:1f:f2:64:63:46:
76:84:37:df:2a:49:d2:0d:36:57:1a:c2:11:ab:46:0a:25:84:
1b:ad:a6:32:66:04:bc:c4:36:eb:d3:49:63:cd:27:39:e5:f3:
71:33:99:14:b2:1e:f6:2a:39:3b:69:37:a5:6a:53:ad:bb:c2:
88:06:9a:b9:c9:8b:a3:61:a7:95:49:97:1f:c2:e8:d7:eb:7a:
0c:76:70:eb:4d:e0:14:4b:50:37:15:75:c0:65:dd:05:7d:d0:
01:10:7a:31:7a:9d:a9:b5:a2:97:74:ea:38:17:2b:6d:dd:e7:
86:90:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:21 2025 by rpki-client